Privacy notice
Last updated: 9 November 2026 (sign-in through HighLevel and QR code)
Controller
Moritz Jahraus (JoMoCo Solutions), Karolingerstraße 99, 40223 Düsseldorf, Germany. Email: m.jahraus@jomoco-solutions.com.
What we store
Your email address, the name you choose, your topics, industry, audience, tone and time window, optionally your LinkedIn profile URL, your push subscription, the posts you submit, your comment orders and their confirmations, your credit balance, and any comment drafts shown to you. If you open Social Circle inside HighLevel, we also store your HighLevel user ID and sub-account ID so you are signed in without a password, and we check your JoMoCo Social subscription status to decide whether you have access. To sign in on your phone, we store a one-time code for ten minutes, only as a hash. We do not keep our own access logs. Our hosting providers keep short-term technical logs (IP address, time, request) to run and secure their infrastructure.
We never ask for your LinkedIn password, never read your LinkedIn session and never post on your behalf. We only read the public page of a post you or another member submitted.
Why and on which legal basis
We process this data to run the service you signed up for: matching posts to members, sending you comment orders, tracking confirmations and credit (Art. 6 (1) b GDPR). Web push is sent only after you allow it in your browser; you can revoke it there at any time (Art. 6 (1) a GDPR). Technical logs and error alerts serve to secure and operate the service (Art. 6 (1) f GDPR).
How long
Post texts and comment drafts are deleted 30 days after a post is completed. Your account data stays until you ask us to delete it or the pilot ends.
Who processes data for us
Supabase (database and sign-in, EU region), Hetzner Online GmbH (server, Germany), HighLevel (LeadConnector, USA) for signing you in inside HighLevel, and your email provider for sign-in codes and fallback messages. Push messages are delivered through the push service of your browser vendor (for example Google, Apple or Mozilla); they receive only an encrypted message and your subscription endpoint. Once we add AI comment drafts, an AI provider with an EU data centre will receive the public post text and your topic settings, not your email address. We will update this notice before that step goes live.
Your rights
You can ask us to show, correct, export or delete your data, to restrict processing, and to object to processing based on our legitimate interest. Write to m.jahraus@jomoco-solutions.com. You can also complain to a data protection authority. The one responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (ldi.nrw.de).